MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161920 Malicious code in nasrul-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554bf4710bb081ccd04a87ef3a1aa743e4167d71205dd71d40f69f6af0f87eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169676 Malicious code in ucok-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48239d5501ccd47874a4d9b21adac67494c96d2e4fb7bbb3a3353f2eb37b4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168046 Malicious code in teagood-yakuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e9d2425937fb74c382f1be834a8cf00657a063ca11dc1ae0372d93ca02c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167664 Malicious code in teagood-namakai102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107ceb30325accf359dadeb9f477bb977871fae07f2b9f08ba546b25c0c4d732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170217 Malicious code in uyaudtu-tauuyut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6785b067b5c2ba4321cb1a2e9a97c644de8312baf9c57f58a6b1d014587f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154095 Malicious code in cinta-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972d7a6c0351c2383e0a6b64bcf1428f41cf5e45263c83c69e8ca546921420ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157275 Malicious code in kamasada-nati-ylfara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8506e0e532e773874385d40b003f9a47d2f249949ac76d4a25b9c3e648eca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf5cd6c1865073d828a89ff45c10d8adc0689fbf62000c3cf8bb684f68643fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430e291b17b0deb6a10c7696d83874ffe6c598966f1760deff03865883dd0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990de35ee357135d32f70c34d0634b86de15a13c657ad67b47c5b94bbbb2458e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b485fcf742dad795c5579c242becc06c58173ecebe3ada950e2643f50c3f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatmumolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d6dae45ff6a86e6a2414886cf33b62fb2aee333fc03dd78ad919a0dcffd476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45efbf7f325c41d25794872b80035626ddb7d5e3a41363b143297b30204f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fa45f766783da72d01780566f4e7fa0941e9ff6bd5ebee617b4bd306f3dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab23f0e69db76fdcdead4890a76a74a1853ef6b25c5fb5b87a6c70b4935e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefufu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a04b49582024a8a6902b666c8b5537d9a4fe41f39a35fb5434389ca2cfc8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b807f9fd61e2cb3e4d917ec078a39f743cb44d7869d9a43ad6a2313f506e780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...